$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/24DB124029D711F19B6521AE99833773.roa File: 24DB124029D711F19B6521AE99833773.roa (raw, json) Hash identifier: L9YX4gv3DsNtGEZMP/J2sxI8a+81Ov4a8RF/MY/5byg= Subject key identifier: 2C:10:47:93:62:8E:B2:9D:4A:6D:75:6F:2D:12:C9:16:AC:D0:6C:78 Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A Certificate serial: 1E Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/24DB124029D711F19B6521AE99833773.roa Signing time: Fri 27 Mar 2026 12:19:04 +0000 ROA not before: Fri 27 Mar 2026 12:19:04 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 398169 IP address blocks: 207.226.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 17:49:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A Validity Not Before: Mar 27 12:19:04 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69c675b8-13ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1e:da:65:f3:54:6f:b4:53:d7:aa:e2:e6:b9: 76:5f:36:0b:17:8a:79:5e:8c:4e:ab:dc:f3:5e:8c: 07:ae:ae:cb:b6:5b:a7:d4:46:bb:05:6e:4a:c9:62: f4:4c:ca:c9:3f:81:b1:49:07:1a:15:4d:83:ab:59: 29:30:dd:b7:3c:c4:28:d6:d4:41:1b:90:6b:cb:3f: cd:58:54:5b:63:ff:f6:6c:32:8e:98:21:85:09:e8: e0:c2:0d:7c:03:5c:ea:9b:3c:27:d3:97:fd:76:c3: f5:a1:5b:c3:e8:35:30:79:62:f5:a1:68:78:3f:4c: ac:de:86:c5:18:ac:90:ee:25:bb:44:ee:a7:b1:98: 27:8f:70:83:5d:57:bb:13:06:be:67:df:70:b0:8f: fc:a8:a4:e8:17:4e:85:0d:f4:a9:cb:7c:a6:d9:82: c1:39:81:51:86:8e:40:1b:1e:0a:07:a8:82:96:e5: fd:f6:6d:96:db:e9:24:51:50:d2:b9:fe:8a:ff:e6: 2f:bc:68:d5:f8:25:0f:2b:01:07:43:fa:54:9e:fd: 45:4d:62:59:27:79:e3:94:3b:9d:54:75:15:26:e4: bc:8e:61:83:ac:8d:c8:48:c0:51:f2:0e:39:1d:a7: 89:c1:e3:dc:13:e6:0f:57:da:69:17:0b:18:6c:1e: 46:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:10:47:93:62:8E:B2:9D:4A:6D:75:6F:2D:12:C9:16:AC:D0:6C:78 X509v3 Authority Key Identifier: keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/24DB124029D711F19B6521AE99833773.roa sbgp-ipAddrBlock: critical IPv4: 207.226.86.0/24 Signature Algorithm: sha256WithRSAEncryption 25:55:1e:8e:a7:01:c0:8c:5e:38:a9:1c:d7:4c:15:1f:7f:84: df:5b:a0:9f:50:15:bd:26:ed:fe:e5:35:3f:13:e6:ae:ec:24: cc:39:34:99:4b:c3:b5:e6:7c:b0:a1:7f:6e:01:f7:a9:ea:01: 9b:e7:63:dd:95:ed:a1:bc:26:67:52:c1:23:22:7a:99:27:79: 60:04:a6:7c:91:0a:bb:af:e7:ad:a4:5d:94:6a:6c:e1:74:8e: c5:6e:13:f4:cc:b1:e7:e7:1f:91:db:eb:db:a0:78:dc:3a:4d: 12:ea:00:8f:00:2f:8b:3c:2e:1f:26:b4:a8:bf:6a:81:49:29: ea:a5:f5:69:79:88:cc:cd:c3:5a:8c:22:14:90:48:03:f4:1d: 25:c0:f0:93:ae:e8:d4:15:7a:71:8b:48:2b:d3:61:f3:2b:96: 04:9d:f0:36:d1:24:d3:86:0e:80:78:7e:59:0d:17:11:94:c8: 23:58:09:b8:43:3e:83:1e:cd:5d:e6:a5:52:31:cd:e3:9a:57: bb:f0:dc:c8:17:5f:97:77:94:e5:cf:29:7a:b6:1a:d4:2b:42: 3d:83:6f:1a:26:e5:7d:65:35:12:38:14:e4:1e:9f:cc:6d:a7: a0:62:db:b4:d6:7e:32:fa:57:5c:a4:84:96:47:b6:2f:5d:bb: ad:b1:5d:e5 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MDRBOTExMC8GA1UEBRMoM0Q3QjE1QkQ3N0Q5Qjk3NEUzNzM1OERBNzU0REZFQTky OTFFNjgzQTAeFw0yNjAzMjcxMjE5MDRaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YzY3NWI4LTEzY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4Htpl81RvtFPXquLmuXZfNgsXinlejE6r3PNejAeursu2W6fURrsFbkrJYvRM ysk/gbFJBxoVTYOrWSkw3bc8xCjW1EEbkGvLP81YVFtj//ZsMo6YIYUJ6ODCDXwD XOqbPCfTl/12w/WhW8PoNTB5YvWhaHg/TKzehsUYrJDuJbtE7qexmCePcINdV7sT Br5n33Cwj/yopOgXToUN9KnLfKbZgsE5gVGGjkAbHgoHqIKW5f32bZbb6SRRUNK5 /or/5i+8aNX4JQ8rAQdD+lSe/UVNYlkneeOUO51UdRUm5LyOYYOsjchIwFHyDjkd p4nB49wT5g9X2mkXCxhsHkarAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQULBBHk2KO sp1KbXVvLRLJFqzQbHgwHwYDVR0jBBgwFoAUPXsVvXfZuXTjc1jadU3+qSkeaDow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwNEE5L0ZEMzcyRTRBMjk0 NTExRjFBN0FBM0VCRDg0RUU1MjhFL1BYc1Z2WGZadVhUamMxamFkVTMtcVNrZWFE by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUFhzVnZYZlp1WFRqYzFqYWRVMy1xU2tlYURvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDRBOS9GRDM3MkU0QTI5NDUxMUYxQTdBQTNFQkQ4NEVFNTI4RS8yNERCMTI0MDI5 RDcxMUYxOUI2NTIxQUU5OTgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBADP4lYwDQYJKoZIhvcNAQELBQADggEBACVVHo6nAcCMXjipHNdMFR9/ hN9boJ9QFb0m7f7lNT8T5q7sJMw5NJlLw7XmfLChf24B96nqAZvnY92V7aG8JmdS wSMiepkneWAEpnyRCruv562kXZRqbOF0jsVuE/TMsefnH5Hb69ugeNw6TRLqAI8A L4s8Lh8mtKi/aoFJKeql9Wl5iMzNw1qMIhSQSAP0HSXA8JOu6NQVenGLSCvTYfMr lgSd8DbRJNOGDoB4flkNFxGUyCNYCbhDPoMezV3mpVIxzeOaV7vw3MgXX5d3lOXP KXq2GtQrQj2Dbxom5X1lNRI4FOQen8xtp6Bi27TWfjL6V1ykhJZHti9du62xXeU= -----END CERTIFICATE-----Generated at Sat Mar 28 18:54:24 2026 by rpki-client